ci: allow attestations in docker workflow

[skip ci]

Change-Id: Id2267f89aebd1517fac0f6566710f52de304b8f7
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index a117fbe..492865a 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -9,8 +9,9 @@
   workflow_dispatch:
 
 permissions:
-  packages: write
+  attestations: write
   id-token: write
+  packages: write
 
 jobs:
   ndncert-build: